Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207019.roa
File:                     AS207019.roa (raw, json)
Hash identifier:          8Izzkw/rWeVnJO0kRVjnYoiJcmskbABakPNMikr5gDE=
Subject key identifier:   3F:C0:45:FC:B2:DB:B5:F1:B5:41:0A:04:FA:24:2A:0F:EA:A5:91:DB
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       4862C4F43E6FA7FD38452BE4509F48477B798E64
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207019.roa
Signing time:             Fri 05 Jun 2026 05:27:27 +0000
ROA not before:           Fri 05 Jun 2026 05:22:27 +0000
ROA not after:            Fri 04 Jun 2027 05:27:27 +0000
asID:                     207019
IP address blocks:        104.234.10.0/24 maxlen: 24
                          104.234.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 15:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:62:c4:f4:3e:6f:a7:fd:38:45:2b:e4:50:9f:48:47:7b:79:8e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun  5 05:22:27 2026 GMT
            Not After : Jun  4 05:27:27 2027 GMT
        Subject: CN=3FC045FCB2DBB5F1B5410A04FA242A0FEAA591DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:70:3b:ab:35:79:38:56:1b:bd:49:16:dd:95:
                    20:db:0a:c2:02:be:f5:1d:18:c5:0c:67:07:d9:3a:
                    da:2a:96:9e:dc:28:a7:ad:85:4d:b2:23:7f:bd:48:
                    c7:be:49:0e:fa:ef:54:14:17:10:35:3b:f2:06:43:
                    7f:f5:ae:63:d0:1e:b7:8c:d5:c2:15:8e:a2:3f:5c:
                    ed:39:71:ff:71:4f:56:46:2a:2d:37:e5:2c:8f:b5:
                    26:c4:cc:d6:87:08:97:cd:c9:65:b9:cb:1f:b9:87:
                    3d:91:8b:b4:a8:b9:54:b1:8a:de:c9:99:63:9f:5d:
                    12:1a:26:e7:7b:a6:05:6d:26:cf:f0:07:7a:57:61:
                    50:3b:4d:2f:d1:1a:a5:ff:92:a1:81:1a:0b:fb:77:
                    f8:b8:8a:ab:f3:b4:48:fb:de:31:5d:cf:96:ef:69:
                    87:f7:73:34:99:11:95:f3:fa:a3:6b:7f:77:8f:96:
                    66:16:b3:48:37:51:33:62:c5:57:7a:ac:ac:b5:a3:
                    6d:5a:8e:b3:75:0b:ee:33:0a:98:19:ef:b7:08:78:
                    b5:6c:8a:54:5f:f2:f0:84:36:a0:c7:3a:66:80:c5:
                    ae:ed:67:d9:73:71:72:3a:b6:84:0a:34:ad:9e:23:
                    1e:12:83:10:7e:fa:a7:2a:77:66:71:f9:a5:f8:11:
                    f8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C0:45:FC:B2:DB:B5:F1:B5:41:0A:04:FA:24:2A:0F:EA:A5:91:DB
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207019.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.10.0/24
                  104.234.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:7a:4f:b2:ad:3e:b3:ed:9b:33:50:07:c4:90:0f:2b:9d:8c:
         90:ad:d5:cf:6d:b3:6e:db:a5:f8:08:e0:00:80:bc:9d:88:6d:
         d5:5b:9a:62:07:82:7d:2f:75:30:99:11:ac:7d:f6:78:3c:1f:
         5b:33:dc:04:01:7b:65:cb:6d:de:92:96:14:88:bb:6b:b6:19:
         ab:63:76:75:0d:7b:b2:a2:7d:16:15:fc:83:0e:a7:4d:f4:2d:
         3b:14:82:02:c8:eb:51:3c:88:9f:b3:c4:4b:78:53:f6:8b:43:
         e8:4c:85:b6:b2:fe:49:16:63:3f:a4:4e:ca:c6:93:c4:e5:e7:
         14:c4:3c:d3:8f:88:ee:de:9e:0b:d6:e5:0c:2b:51:36:9f:22:
         c9:6e:44:0d:83:8c:db:03:c8:ba:0f:3e:7c:a9:c9:cd:12:30:
         d1:b6:6e:08:0c:2c:13:6e:49:81:78:dc:ae:40:69:7c:34:b4:
         7b:4b:54:c4:23:fb:41:45:88:40:43:bb:b3:f7:1e:36:89:0c:
         4a:d2:30:5e:44:c5:3a:46:0d:4b:9b:10:e9:dd:25:d7:0e:7f:
         1e:4d:f6:cb:6c:97:64:19:94:83:52:86:61:88:57:ac:30:8a:
         2d:82:db:4e:d0:ce:6a:61:3d:e8:cf:c9:41:94:bd:08:97:ae:
         6d:b1:0b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 21:16:20 2026 by rpki-client